From 6b75fbdbd088bad2d4f43bef563ced12759d03b5 Mon Sep 17 00:00:00 2001
From: VinPropane <don@donmail.org>
Date: Mon, 4 May 2026 20:24:35 -0400
Subject: [PATCH] chore: grant pull-requests read for paths-filter API

---
 .github/workflows/dotnet.yml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/.github/workflows/dotnet.yml b/.github/workflows/dotnet.yml
index 2857912..7334c57 100644
--- a/.github/workflows/dotnet.yml
+++ b/.github/workflows/dotnet.yml
@@ -15,6 +15,12 @@ on:
   pull_request:
     branches: [main]
 
+# dorny/paths-filter reads the PR file list from the GitHub API; the default token
+# scope is too narrow without pull-requests:read ("Resource not accessible by integration").
+permissions:
+  contents: read
+  pull-requests: read
+
 jobs:
   build:
     runs-on: ubuntu-latest